Privacy Policy

1. Who is responsible

Heysnaps is operated by Mag. (FH) Jürgen Neuhuber, sole proprietor, Obere Höllstraße 20d, 4451 Garsten, Austria. For privacy questions and requests, write to privacy@heysnaps.com.

2. What we collect from hosts

Your email address, which we use to sign you in, send your album link and receipts, and tell you about your album (for example before it expires). The album's title, occasion, date and settings. Your purchases. If you order a printed product, the shipping name and address.

Payment details are entered directly with Stripe. We receive a confirmation, the amount, and the last four digits and type of the card, never the full card number.

3. What we collect from guests

The photos and videos a guest uploads, with the technical information stored inside the files: the time a photo was taken and, if the camera recorded it, where. The location is used only to show the host a map page in the photo book; it is removed from the copies shown to other guests. A name, if the guest chooses to enter one. Guest book messages in text, audio or video. RSVP answers, if the host uses invitations.

Guests do not create accounts and we do not ask for their email address or phone number to upload.

4. Faces in photos

To lay out photo books without cutting people off, our software detects whether a photo contains faces and where in the picture they are. We store that as a count and a rectangle per photo. We do not identify who is in a photo, we do not create or store face templates or other biometric identifiers, and we do not offer face search.

5. Technical data

Our servers log requests (IP address, time, page, browser type) for security and troubleshooting and keep those logs only as long as that purpose requires. We use a sign-in cookie for hosts and a cookie that remembers how a visitor first reached our website, so that we can tell which channels lead to purchases.

On our own website and in the host area we count visits with Plausible Analytics, which we run ourselves. It uses no cookies and does not build visitor profiles.

If, and only if, you click “Allow” in the notice on our website, we record your visit to our own pages and the host area with OpenReplay, which we run ourselves on servers in the European Union: the pages you open and where you click, with everything you type hidden. We use this to find and fix confusing parts of the site. You can decline, and you can withdraw your permission at any time by clearing this site's data in your browser or writing to us.

The pages guests use to upload, view an album or watch the slideshow set no cookies and load no analytics or advertising scripts.

6. Why we use this information

To provide the album and the things made from it, to take payment and deliver printed products, to send transactional email, to keep the service secure and prevent abuse, to understand in aggregate how our website is used, and to meet legal obligations. We do not use uploaded content for advertising or to train machine-learning models.

7. Who processes data for us

We share personal information only with the service providers that run parts of Heysnaps for us, under contracts that limit what they may do with it:

Hetzner Online GmbH (Germany/Finland) for hosting, storage and encrypted backups. BunnyWay d.o.o. (Slovenia) for delivering images quickly. Stripe for payments. Gelato for printing and shipping the products you order. SMTP2GO (Sand Dune Mail Ltd, New Zealand) for sending email, with Brevo (France) as a fallback.

We also disclose information when the law requires it or to protect people from harm. We do not sell personal information and we do not share it for cross-context behavioral advertising.

8. Where data is stored

Albums are stored on servers in the European Union (Finland), with encrypted backups in Germany. If you are in the United States, your information is transferred to and processed in the European Union and, for the providers named above, in the countries where they operate.

9. How long we keep it

Album content is kept for the storage period of the plan and deleted when the album expires or when the host deletes it, whichever comes first. Backups expire on their own schedule shortly afterwards. Purchase records are kept for as long as tax and accounting law requires. Host accounts without albums can be deleted on request.

10. Your choices and rights

Hosts can view, download and delete album content at any time. If you are a guest and want an upload of yours, or a photo you appear in, removed, ask the host, who controls the album; if that does not work, write to privacy@heysnaps.com with the album link and we will help.

Depending on where you live, you may have the right to know what personal information we hold about you, to get a copy, to correct it, and to have it deleted, and the right not to be treated differently for using those rights. To use them, write to privacy@heysnaps.com. We will ask for enough information to confirm the request is yours. If you are in the European Union or the United Kingdom, you also have the rights given by the GDPR, including the right to complain to your data protection authority.

11. Children

Heysnaps is for adults organizing events. We do not knowingly collect personal information from children under 13, and children should not upload without a parent or guardian. Photos of children at family events are uploaded by adults, who are responsible for having the parents' agreement. If you believe a child has given us personal information, write to privacy@heysnaps.com and we will delete it.

12. Changes

If we change this policy in a way that matters, we will update the date above and tell hosts by email or in the product.